temax.gob.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:15:02:fe:1c:1a:53:22:c2:96:24:cf:dc:39:2d:61:9c was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=temax.gob.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:15:02:fe:1c:1a:53:22:c2:96:24:cf:dc:39:2d:61:9c
Serial Number (int): 344053402283532561857629985012622809719196
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:46:c0:51:cf:af:27:ca:0e:6d:cd:d8:12:53:6b:b6:cd:21:41:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:2c:4d:19:43:8c:99:aa:24:92:3f:70:de:4e:26:ba:41:04:8a:bf
Fingerprint (sha256): d7:b0:6d:2c:2f:05:b0:29:f3:49:96:4f:b1:ed:a3:26:54:9e:50:53:6d:f9:89:d0:43:0c:c1:74:dd:b8:98:0b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate temax.gob.mx

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for temax.gob.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.hocaba.gob.mx
cpanel.swai.com.mx
cpanel.temax.gob.mx
hocaba.dzilamglez.gob.mx
hocaba.gob.mx
mail.hocaba.gob.mx
mail.swai.com.mx
mail.temax.gob.mx
swai.com.mx
swai.dzilamglez.gob.mx
temax.dzilamglez.gob.mx
temax.gob.mx
webdisk.hocaba.gob.mx
webdisk.swai.com.mx
webdisk.temax.gob.mx
webmail.hocaba.gob.mx
webmail.swai.com.mx
webmail.temax.gob.mx
www.hocaba.dzilamglez.gob.mx
www.hocaba.gob.mx
www.swai.com.mx
www.swai.dzilamglez.gob.mx
www.temax.dzilamglez.gob.mx
www.temax.gob.mx

Other certificates including the domain name temax.gob.mx

(limited to 100 certificates)
temax.gob.mx
temax.gob.mx
temax.gob.mx
www.prueba2.model1.gobiernosenlinea.com.mx
temax.gob.mx
temax.gob.mx
www.temax.gobiernosenlinea.com.mx
temax.gob.mx
temax.gob.mx
buctzotz.gob.mx
www.bokobayucatan.gobiernosenlinea.com.mx
mococha.gob.mx
mococha.gob.mx
webmail.seye.gob.mx
mococha.gob.mx
*.gobiernosenlinea.com.mx
*.celestunyucatan.gob.mx
teya.gob.mx
temax.gob.mx
temax.gob.mx
temax.gob.mx
temax.gob.mx
temax.gob.mx
*.uaymayucatan.gob.mx
dzilamglez.gob.mx

Certificate

The complete raw certificate details for temax.gob.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN7kC6YTntqic21gqPEl
OaiyEkpHseyuME4WCPyex2bM0yWz2ZUWQy5Rg5yR4bGslWwYG5ujDi8o0ZG0phDh
G8qHRJqSFUOulJ3tkvI5o6X92CDgO6zE2DTZXPAJSQHwPfGXUX3OLHF40Eka4NkJ
Gwxrds0scgVjh8RaaseGu9axN4DzM9PIqUcg//y78UaF+KIYhS7TH5Xeelc9/3Mw
EZ0ZNnJjN0qDxnswEqfOg+SMrO4dcRStwgphmVQwuOfcKvB550589nkJAVqZ977D
rOoFxqYyfIrf7SywjJbQ0h4UXwahtjEJLSYLpAoPRQoq70eJIdpnnLQCUNJ7szvQ
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344053402283532561857629985012622809719196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-23 08:27:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-24 08:27:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'temax.gob.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24347666104776736198975578562565802882131965558169872776027569997070502956288880129352854670063367058415348627861456654403601568456787115190246098652378795738991669916061417375417934389201493691188044865888961565826833280179384037211800541017213083163554632861217174397640614174009418073067076510356374974515851859862259518542919009219669842146452474466413579739519278302940846067759647742511732095327372306653244881397155031899696332751488322826989813757175129421912602178718537513613495828315942435266276572115927206834846541419515541490653211197365367599613433433828422935046743803764629626181895806072729139662911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b46c051cfaf27ca0e6dcdd812536bb6cd214178
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (514 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.hocaba.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.swai.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.temax.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hocaba.dzilamglez.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hocaba.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hocaba.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.swai.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.temax.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swai.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swai.dzilamglez.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temax.dzilamglez.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temax.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.hocaba.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.swai.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.temax.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.hocaba.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.swai.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.temax.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hocaba.dzilamglez.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hocaba.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swai.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swai.dzilamglez.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temax.dzilamglez.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temax.gob.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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